laughs in immich

Like the version or the media?

I’ve been using jelly since just after the emby fork and never had an update issue on docker. Automatic snapshots every 5 mins (amount other backup tools) and means I don’t need to everything much if it does.

Jellyfin still so buggy though. The UI is garbage too. I want to love it… I run both lol.

Stronger compartmentalization

honestly every explanation probably just ends at ‘this is what i learned on and it works’. same way i religiously use nano and try to do everything in bash first. or how a couple coworkers can’t stop explaining their vim workflow and defending python unprompted like it’s a trauma response for them. my current homelab is also running a r9 with 64gb ram and 30tb storage. if i were paying for remote hosting, still using salvaged hardware or being paid, i’d invest time learning newer processes. but containers haven’t caught my interested and this set up takes basically no effort on my part to maintain, so i can focus my limited free time elsewhere.

This may not be the answer you are looking for, but one method would be to use WSL on windows to run a Linux distro with Docker installed and just migrate everything over, basically 1-to-1. Then set WSL to auto start when you boot up windows. If you install Docker Desktop on Windows, it will also pick up that you’re using Docket via WSL and allow you to manage shit from the client. I don’t do that though, I’m a masochist old-school.

Looks like there is a config and cache location in their docker scripts. The easiest way to make a docker application portable is to bind mount the config and cache. That way you have access to the actual files and could copy them to your windows partition.

If you’re already using a volume for that data, I think it becomes a bit trickier. I know technically you can move or copy volumes, but I’ve never tried. Although you could still bind mount a random directory and still copy the files out.

Yeah, Samsung TVs don’t have a native Jellyfin app either. You can sideload it, but good luck walking your “you touched my computer six months ago and now it’s broken. This is your fault” grandmother through that over the phone.

To be fair there is a tvOS app in development but progress is slow because the whole project is maintained by a small handful of volunteers. They’ve put out a call for help and the maintainers post updates here

I just validated that the latest version of the LDAP privilege escalation issue is not an issue anymore. The curl script is in the ticket.

This was the one where a standard user could get plugin credentials, such as the LDAP bind user, and change the LDAP endpoint. I.E., bad.

I chose this one because after going through all of them, it was the only one that allowed access to something that wasn’t just data in Jellyfin.

So for me, security is less of an issue knowing that, as only family use the service, and the remaining issues all require a logged in user (hit admin endpoint with user token).

Plus, I tried a few of those and they were also fixed, just not documented yet. I didn’t add to those tickets because I was not as formal with my testing.

@[email protected]

I’ve heard jellyfin has a lot of security issues

The biggest known stuff I saw on their GitHub is that a number of the exposed service URLs under the hood don’t require auth. So, it’s open-source with known requirements, you can tell easily from the outside that it’s running, and you can cause it to activate a LOT of packages without logging in. That’s a zero-day in any package that can be passed a payload away from disaster.

AS far as TVOS, I’m kinda surprised swiftfin doesn’t service you.

I am also not up to date on Jellyfin security issues but the biggest one I care about is that its clients don’t support OIDC. There’s a neat plugin for OIDC, but without client support it only works with the web client and I’m not a fan of leaving login pages open to the internet.

Op already said they were behind authentik

There also absolutely are apps for tv oses like Android, I use one daily.

https://github.com/jellyfin/Swiftfin is available for tvOS. works great for me with one bug. since i have homepods connected to one of my apple tv’s as it’s speakers. i had to change the setting to use the native video player instead of vlc to avoid and audio delay bug. that cost me the auto play next episode function. i though not auto playing the next episode would annoy me, but it’s turned out to not be a issue at all. but infuse doesn’t include that bug if you want both homepod tv speakers and auto play next episode with jellyfin. as for security, since jellyfin is more modifiable it has a lot more room for misconfiguration for sure. plex had plenty of it’s own security issues, we just only heard about them when some security blogger discovered it.

That is coming, I saw a PR for that. Just need to be patient.

I’m probably mistaken, but I think there might actually be a plugin for this? I haven’t looked into it myself but I swear I scrolled past a plugin listing similar functionality at some point. Or I could be hallucinating. Or it could even exist but no longer work on the current version of the app. Who knows!?

not OP, but this has reared its ugly face once or twice with my friends.

i have been running into another issue, though it may be a firefox issue: playing some filetypes fail to play on web browser but work fine on jellyfin app (i believe my settings are correct for hardware decode on server where it can)

i still have to put some time into figuring it out tho (havent really done my research yet)

yeah it took me about 6 months with jellyfin to feel like i was ready to finally kill plex. the thing that finally did it was getting an email from plex asking if i’d like to check out whats streaming on hbomax.

What are you using to watch jellyfin on iOS?

For android auto, I use symfonium as it can hook into my jf library

I find Jellyfin’s subtitle search much better than Plex’s. Bonus for leaving a subtitle file right along with your file, instead of buried somewhere else so you can’t easily edit it.

that’s about where i was at for a long while. manet finally replaced my apple carplay functionality from plexamp and plex lost it’s last advantage for me. i definitely got my moneys worth from that lifetime plexpass though.

Host Jellyfin either by running their easy setup script or by hosting it on docker, in order for it to be publicly accessible you will need to either port forward and give people your external IP or you need to have your own website. It’s very easy with a docker container to get it running locally, you literally just spin it up, the same as Plex.

i ended up doing both. ldap for the apps. oidc for web based users and the apps that support the quick connect feature. the local user account system works fine too, and ldap would be enough. i just wanted an excuse to play round with sso systems, and it was fun figuring out how to connect all my servers.

authenik has a good docs site for both it’s docker container and connecting it to jellyfin. Authelia looked interesting too.

Anything that has a remote interface is garbage. It’s all cursor mouse based except on a few devices.

It’s not as good as Plex by a long shot. If you have Plex pass no brainer. If not, I’d personally just buy the pass. On Xbox it was just unusable.

Honestly, the easiest thing to do is put it on a mesh VPN like Tailscale and connect their streaming device to your tailnet. If they’re non technical parents then if their TV OS doesn’t support Tailscale, you can pick up a Walmart brand ONN streaming box for <$50 which supports for Tailscale and Jellyfin.

Their last UI changes